Access Context Origin for conditional JWT validation

Question

Hi,

I want to conditionally validate JWT depending on the origin (subscriber).
I have an api on APIM which needs to support OAUTH2 token from two IDPs.
If Origin is X, I want to validate the token against Identity provider X
Else validate against AAD using validate-jwt policy

Which context property would be best to do this conditional check.

Answer 1

Hello @ujjwalDev - Why the conditional validation? Have you tried implementing a single <validate-jwt ...> policy with multiple issuers and signing keys? But if you must, I believe you can associate your subscribers to distinct products in APIM and do something like this: https://stackoverflow.com/a/64475306/528779